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33. The automation system (1) as claimed in claim 32, wherein the standard control device 



out 



controls at least one safety-related output. 

34. The automation system (1) as claimed in claim 32, 

wherein the safety analyzer 5', 5") has a freely programmable logic device, which 
processes monitored safety-related daia. 

35. The automation system (1) as maimed in claims 32, 

wherein the safety analyzer (5, i', 5") is not a logic bus subscriber in the automation 
system (1) and has at least one safety-related output (6) via which at least one bus subscriber (31- 
38) which is associated with the safety analyzer of the automation system is switched on or off. 

36. The automation system (1) as claimed in claim 35, 

wherein the safety analyzer (5, 5', 5r) is set up for switching off at least one of a safety 
island, a bus spur (8), and the entire automaton system. 

37. The automation system (1) as claimeoiin claim 32, 

wherein the safety analyzer (5') has at kast one safety-related input (10), via which the 
safety analyzer is connected to a safety-related ^evice (11) in the automation system for 
detecting safety-related data. 

38. The automation system (1) as claimed in ckim 32, 
wherein the bus (2) is connected via an internee assembly (41) to a host (40), with the 

process-related control being arranged in the host, an^ the safety-related control being arranged 
in the interface assembly. 

39. The automation system (1) as claimed in claim VJ2, 
wherein the bus (2) is a serial bus, and at least o\ie safety analyzer (5, 5') is arranged in a 

long-distance bus section of the automation system. 
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40. The automation system (1) acclaimed in claim 38, 

wherein a safety analyzer (5) s one of arranged directly after the host (40) or arranged 
after the interface assembly (41). 

41 . The automation system (1) as claimed in claim 38, 
wherein a safety analyzer (5) is\arranged in the interface assembly (41). 

42. The automation system (1) as claimed in claim 32, 
wherein the safety analyzer (5, 5\, 5") comprises a memory device for storing a process 

map. 

43. The automation system (1) as claiVned in claim 32, 
wherein the safety analyzer (5, 5', ^") has a device for manipulating at least one of input 

data and output data transmitted on the busV2). 

44. The automation system (1) as claimea in claim 43, 
wherein the device overwrites at least\one of the input and output data in the safety 

analyzer (5, 5', 5"). ^ 

45. The automation system (1) as claimed ir^ claim 43, wherein the device inserts data into 
the datastream. 

46. The automation system (1) as claimed in ckim 32, 
wherein at least one safety analyzer (5, 5', 5y ) is of redundant design. 

47. A method for operating an automation systen^ (1) as claimed in claim 32, comprising the 
following steps: 

using a standard control device (4; 40, 41) for carrying out a process control with the 
processing of process-linked I/O data and safety-related\data, and 
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carrying out processing of saffety-related data in at least one safety analyzer (5, 5', 5") 
with safety-related logic linking data ^ the bus datastream being processed in the safety 
analyzer. 

48. The method as claimed in claiiA 47, 
further comprising the step of us^ng the standard control device to control at least one 

safety-related output. 

49. The method as claimed in claim 41 
further comprising the step of comparing the safety-related logic linking data, which is 

transmitted via the bus, for at least one of thai standard control device (4, 41) and at least one 
further safety analyzer (5, 5', 5") with the corresponding logic linking data of the first safety 
analyzer, in a safety analyzer (5, 5', 5"). 

50. The method as claimed in claim 47, 
further comprising the step of checking thfe logic linking data, which is produced by the 

standard control (4, 41) and is sent as output data via the bus in at least one safety analyzer (5, 5', 
5") by modeling the safety-related logic links of th^ standard control (4, 41). 

5 1 . The method as claimed in claim 49, 
fiirther comprising carrying out safety-related\functions in response to the comparison by 

the safety analyzer (5, 5', 5"). 

52. The method as claimed in claim 50, 
further comprising carrying out safety-related fiijnctions in response to the checking by 

the safety analyzer. 

53. The method as claimed in claim 47, further comprising the step of carrying-out a safety- 
related function via a safety-related output (6) of the safety analyzer (5, 5', 5"). 
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54. The method as claimed in clkim 47, 

further comprising the step of using the safety analyzer to carry out safety-related 
functions in response to the safety-relpted data detected via the safety-related input (10) of the 
safety analyzer (5'). 

55. The method as claimed in claimV54, 
wherein the process of carrying o^t the safety-related function comprises switching a bus 

subscriber (32-38) on or off. 

56. The method as claimed in ckim 47, 
wherein the safety analyzer 5") at least one of overwrites or deletes at least one 

data item into the datastream and inseffij^t least one data item into the bus datastream by means 
of a device for manipulating the datastream on the bus (2). 

57. The method as claimed in olaim 56, 

wherein the safety analyzer (6, 5', 5") at least partially stores the monitored datastream 
and copies input data in the bus datasireams to output data in the bus datastream, and vice versa. 

58. The method as claimed in claini47, 

wherein safety-related data is transmitted via the bus (2) using a security protocol. 

59. The method as claimed in claim 58\ 
wherein in addition to the safety data\item, the security protocol comprises at least one of 

the negated safety data item, a sequential numljer, an address and data protection information 
(CRC). 

60. The method as claimed in claim 47, 
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wherein the bus is a systeir 



transmitted between at least two si ives, by means of a data link via at least one safety analyzer 



(5, 5\ 5"), with the safety analyze] 
6 1 . The method as claimed in c 
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operating on the master-slave principle, with data being 



copying data in the bus datastream. 
aim 60, 

wherein the data is transmitted between individual bus subscribers (31-38). 

62. The method as claimed in claim 47, 

wherein the bus is a system operating on the master-slave principle, with data being 
transmitted between at least two slaveb by means of a data link via the control or the master, with 
the control or the master copying data in the bus datastream. 

63. The method as claimed in claim 1^2, wherein the data is transmitted between individual 
bus subscribers (31-38). 

64. The method as claimed in claim 41 
wherein at least one of quality data ik produced by means of a safety analyzer (5, 5', 5"), 

and the data which has been read is prepared\for fiirther processing. 

65. The method as claimed in claim 47, 
wherein the safety-related logic links u^d in a safety analyzer (5') are at least partially 

carried out in redimdant form in at least one furfflier safety analyzer (5"), and the same safety 
functions are at least partially carried out by the ^o safety analyzers. 

66. The method as claimed in claim 47, 
wherein a safety analyzer also at least partiklly carries out process data processing. 



